$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c9673d9a-411d-4fa9-901f-01428b4afe78.roa File: c9673d9a-411d-4fa9-901f-01428b4afe78.roa (raw, json) Hash identifier: sh5Tj96SOI6OsO2PVDA5ma4oij4GKJ75ttzF1zeA8n4= Subject key identifier: DF:B7:68:10:15:BE:2F:AF:83:04:5F:AF:1F:7B:6F:C1:A9:45:05:FC Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 71EE453F41C669F2434B75CBB1BEE4883341B783 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c9673d9a-411d-4fa9-901f-01428b4afe78.roa Signing time: Thu 14 May 2026 00:51:09 +0000 ROA not before: Thu 14 May 2026 00:51:09 +0000 ROA not after: Wed 12 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.157.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 31 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:ee:45:3f:41:c6:69:f2:43:4b:75:cb:b1:be:e4:88:33:41:b7:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 14 00:51:09 2026 GMT Not After : Aug 12 23:59:59 2026 GMT Subject: serialNumber=05a229893909e2f97f3c386cd1ffb47c8575928dfc945a6cfac1151a3692baa7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d9:70:de:39:22:6f:75:d1:ef:7b:0d:55:51: a2:50:48:11:99:06:02:fd:04:31:13:81:65:ea:18: 60:83:35:47:d9:b2:72:b6:95:85:f2:20:99:03:f3: fe:3b:f6:41:d7:32:6f:db:c0:bf:46:1b:62:8b:01: ac:a9:ea:7e:f3:18:c3:08:9e:3a:69:11:cd:2f:89: 9a:ea:f5:d5:96:a9:71:e0:c0:22:2e:7e:93:dc:d4: da:eb:65:6f:be:c4:17:42:e1:08:f8:4c:f0:49:24: 56:68:76:de:03:a7:6c:d6:ed:77:3b:7e:9a:74:cf: 98:82:79:23:85:be:d8:3b:cc:2a:42:8d:f0:7f:a6: e5:a2:52:67:b6:00:fb:d8:84:b4:b4:36:42:a9:13: 48:05:a7:9e:09:05:95:08:c5:57:7a:8d:84:e3:94: 4c:28:16:f5:14:44:b0:8a:59:66:af:da:39:87:23: 17:e7:4c:33:17:c8:f9:b7:67:c7:b4:d5:9d:05:50: 59:1c:c7:c3:b6:3e:1c:2a:33:d0:34:f5:58:bd:0d: 59:30:b3:69:7f:78:46:90:a6:86:21:d8:e7:9f:3e: 0f:39:2c:d9:68:0d:a1:72:d3:2b:ea:b9:18:9e:66: 6c:be:99:52:28:5f:70:9d:7f:b8:91:d8:e7:dd:81: 38:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:B7:68:10:15:BE:2F:AF:83:04:5F:AF:1F:7B:6F:C1:A9:45:05:FC X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c9673d9a-411d-4fa9-901f-01428b4afe78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.157.95.0/24 Signature Algorithm: sha256WithRSAEncryption 45:64:e2:32:e2:33:8a:73:dc:79:66:a6:10:ac:a2:5e:53:76: 8a:05:ec:c9:e2:e8:75:75:ff:bc:e5:27:cd:b1:17:a7:7e:ab: 06:ba:74:20:48:f4:2b:32:ad:37:b2:77:db:c3:5f:58:4f:b8: ce:79:27:93:0e:7c:13:b5:9e:bf:ff:83:35:be:b0:aa:56:48: 3d:be:73:20:e8:25:3f:5e:d0:d4:94:51:04:9f:76:38:ef:83: 9d:20:4b:5c:56:56:fe:c0:48:8b:c1:0a:0b:cb:4b:77:98:fe: 0f:8b:f1:88:ad:50:8c:76:a9:81:2a:fb:64:39:3e:0b:cf:b4: 1e:49:35:c3:f9:7d:b6:4a:eb:1f:d6:b2:ef:43:73:a9:57:b7: 8b:76:ea:fc:bc:28:99:e0:e5:92:0f:5a:80:19:a4:7a:be:5a: 7d:e1:66:18:33:8b:76:5a:ea:c6:d1:7d:50:58:1e:67:5f:a2: 68:81:72:00:59:2a:23:1c:c1:d2:7c:2d:2d:f5:78:95:50:c7: 9d:1d:e7:ba:c8:65:32:19:b2:34:15:e3:7c:29:f2:db:cc:8e: cf:71:b9:de:d0:2f:1e:1e:4c:79:49:df:48:ba:b6:04:fc:80: d5:d7:93:a4:7c:a9:d4:0e:66:21:cd:5a:66:39:ff:dd:a2:4e: 32:14:28:9a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUce5FP0HGafJDS3XLsb7kiDNBt4MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTE0MDA1MTA5WhcNMjYwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwNWEyMjk4OTM5MDllMmY5N2YzYzM4NmNkMWZmYjQ3Yzg1 NzU5MjhkZmM5NDVhNmNmYWMxMTUxYTM2OTJiYWE3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDd2XDeOSJvddHvew1VUaJQSBGZBgL9BDETgWXqGGCDNUfZ snK2lYXyIJkD8/479kHXMm/bwL9GG2KLAayp6n7zGMMInjppEc0viZrq9dWWqXHg wCIufpPc1NrrZW++xBdC4Qj4TPBJJFZodt4Dp2zW7Xc7fpp0z5iCeSOFvtg7zCpC jfB/puWiUme2APvYhLS0NkKpE0gFp54JBZUIxVd6jYTjlEwoFvUURLCKWWav2jmH IxfnTDMXyPm3Z8e01Z0FUFkcx8O2PhwqM9A09Vi9DVkws2l/eEaQpoYh2OefPg85 LNloDaFy0yvquRieZmy+mVIoX3Cdf7iR2OfdgTiFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU37doEBW+L6+DBF+vH3tvwalFBfwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2M5NjczZDlhLTQxMWQtNGZhOS05MDFmLTAxNDI4YjRhZmU3OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA2nV8wDQYJKoZIhvcNAQELBQADggEBAEVk4jLiM4pz3HlmphCsol5TdooF 7Mni6HV1/7zlJ82xF6d+qwa6dCBI9CsyrTeyd9vDX1hPuM55J5MOfBO1nr//gzW+ sKpWSD2+cyDoJT9e0NSUUQSfdjjvg50gS1xWVv7ASIvBCgvLS3eY/g+L8YitUIx2 qYEq+2Q5PgvPtB5JNcP5fbZK6x/Wsu9Dc6lXt4t26vy8KJng5ZIPWoAZpHq+Wn3h Zhgzi3Za6sbRfVBYHmdfomiBcgBZKiMcwdJ8LS31eJVQx50d57rIZTIZsjQV43wp 8tvMjs9xud7QLx4eTHlJ30i6tgT8gNXXk6R8qdQOZiHNWmY5/92iTjIUKJo= -----END CERTIFICATE-----Generated at Sat May 30 01:59:44 2026 by rpki-client